Access Credit Union - CAFT Safety

With CAFT businesses can:

Initiate direct deposits, such as payroll or accounts payable
Collect payments such as loans, accounts receivable, strata/condo fees, donations, and club fees/dues

If you notice unusual activity:

Check the CAFT Activity Log and History File information.
Contact Access Credit Union.
Change your CAFT password immediately.
If you have been compromised, follow the security
procedures of your company.

Protecting your passwords and User IDs.
Managing your CAFT transactions.
Verifying file totals prior to file processing.
Releasing files in a timely manner.
Reviewing CAFT email notifications upon receipt.
Reviewing your Activity Log.

Reviewing your History File.
Verifying all NAFT reports.
Verifying account settlement to the settlement register (AFTR0010).
Contacting us about any changes to Originator information.
Immediately notifying us of any unusual activity.

What can I do to protect myself?

Users can prevent transaction processing due to key error, theft or fraud by:

Enhancing cyber security practices:
- Limit administrative rights on users' workstations to help prevent the inadvertent downloading of malware or other viruses.
- Ensure virus protection and security software and the operating systems/applications on your computer are updated regularly.
Implementing internal controls (segregation of duties, dual authorization, setting CAFT limits).
Reviewing transaction files for accuracy.
Reviewing CAFT email notifications.
Reconciling banking transactions daily.
Talking to an insurance provider about Social Engineering coverage.

TIP: Familiarize yourself with your account agreement and your business's liability coverage for fraud.

Use strong passwords

The best way to guard against these types of attacks is to use a strong password. This includes:

12 characters minimum
Using a mix of alphanumeric characters (a-z, A-Z, 0-9)
Using a mix of special characters: ‘ – , . /
NOT using dictionary words or common names
NOT using sequential or repeating numbers or letters such as abc, 123, 555
NEVER re-using a password
NEVER sharing your password with anyone

TIP: Consider using a random password generator for maximum security such as:

Use the right website

Always use the login page on your browser to login to an account or online service – never use links in an email. Ensure you are accessing the legitimate CAFT Payment Services website.

Please do this by typing in the legitimate CAFT site directly:

https://www.caft.paymentsanytime.com.

TIP: Save this site as a bookmark in your web browser.

Keep your information safe

Create strong passwords and never share your User ID or password.

Do not communicate or keep a copy of your usernames and/or passwords for any of your financial services ( or other secure logins) in your email account.

A common way of gaining illegitimate access to a secured account is through the discovery of sensitive information within a compromised email account.

TIP: Enable multi-factor authentication (MFA) on your email account, if available, for an added layer of security – for example, so you are prompted to enter a security code sent to your phone whenever you attempt to login to your email from a new device. If your current email provider does not offer MFA, switch to a more secure provider that offers these tools such as Gmail, Hotmail, Yahoo, Outlook, or Live.ca.

Don't click links

Never click on links or attachments from an unexpected email, even if it looks like it is from a person or organization you know. In this case, never click on a link to CAFT sent via an unexpected email, text message, or from a search engine advertisement. These links may take you to fraudulent sites.

TIP: CAFT system emails don’t have links! There may be a text file attached if you have processed a transaction recently. These attachments end in .txt.

Cyber security is everyone’s responsibility!

Remember the following to keep your information safe:

Create a difficult to guess password using a combination of letters and numbers and never share your User ID or passwords.
Logout of any secure accounts, such as online banking, when finished. DO not just close the browser window.
Lock or logout of your computer when unattended.
Never access your Access Credit Union accounts or services using open/free WiFi (e.g. coffee shops, public libraries, hotels, etc.). If you must access these services in a public location, opt to use data instead.
Be mindful of phishing scams: never open an attachment or links from unexpected emails, even if they look legitimate.

TIP: Even if an email appears to be coming from a legitimate sender, if it involves making changes to login or banking information, verify the legitimacy with the sender via another communication method (e.g. phone call).